Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72d2297f-5330-3207-b464-fc465cc29d7e.roa
File: 72d2297f-5330-3207-b464-fc465cc29d7e.roa (raw, json)
Hash identifier: hAWZA2U0/ohW/Zpos9w++ic/2ntcVqfLAFk33yvV/j0=
Subject key identifier: FA:55:D4:6B:88:6F:91:BB:05:A2:48:C5:F5:30:47:B5:88:B2:6A:76
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A154573C2AF1F8EB5EF3240
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72d2297f-5330-3207-b464-fc465cc29d7e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 64.233.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:15:45:73:c2:af:1f:8e:b5:ef:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=17f5d616-61a8-441d-a955-7779e2f725aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:f6:ef:7a:95:e2:ef:32:59:05:5d:a0:ef:
fa:e5:1e:ce:1c:17:f4:0c:83:96:d6:49:c6:e0:02:
99:0c:4f:f4:e2:80:33:49:f0:69:ed:af:f6:34:21:
2f:a7:68:d5:01:48:8b:86:20:66:db:80:1f:50:85:
1d:b2:d9:77:fb:9f:ed:9c:f0:23:c0:9c:fd:7f:df:
5d:a7:7a:82:0e:95:3e:d8:8f:f3:25:93:61:0e:46:
d4:23:b7:ef:f6:7d:68:ac:38:54:1a:c0:a1:56:95:
e1:2f:ab:fb:ad:00:36:e7:93:83:26:ec:f7:f5:55:
7a:e5:61:a0:bd:6a:b4:65:4a:9c:01:81:d6:c0:7a:
17:9f:22:d9:e7:d2:06:97:45:4a:f3:d0:74:94:cd:
53:e6:61:8d:11:21:8c:6b:8a:c7:b6:b2:a1:1c:d1:
c9:b3:ee:1a:2f:a1:fb:a0:e9:28:35:c2:11:50:f6:
29:bf:5a:f5:4c:9f:d8:b5:ae:7b:0a:09:61:65:bc:
97:50:37:7b:36:fd:3d:3f:e0:85:84:93:27:aa:d9:
84:cd:ff:89:1d:c9:39:58:a4:2d:6b:f6:ff:50:79:
7f:02:af:78:74:bf:bf:69:ab:78:44:f0:32:84:77:
19:92:cb:1a:11:72:3c:f5:e1:15:3b:bf:e3:b9:31:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:55:D4:6B:88:6F:91:BB:05:A2:48:C5:F5:30:47:B5:88:B2:6A:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72d2297f-5330-3207-b464-fc465cc29d7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:65:67:e0:ab:3e:bc:74:9f:0c:7b:c4:a6:93:c7:72:b0:ea:
9f:be:19:d2:4d:c2:a6:8c:7c:38:4f:12:3d:d7:f9:e7:b4:a5:
d9:94:b2:49:34:ef:34:cf:92:04:0c:8f:19:64:bc:e5:f4:3f:
ce:80:66:cb:04:9b:c2:e4:d1:33:52:7d:7c:ba:f1:cc:69:ef:
b9:31:25:a3:b6:54:98:ed:46:21:f4:d5:11:67:05:9f:cc:fe:
d6:dc:97:d4:1f:90:34:b6:01:fc:a3:03:2d:ee:c1:88:e1:f7:
ff:f1:3b:35:26:cc:0f:21:a2:d1:62:60:f8:e8:b8:e7:f7:66:
e1:f7:c1:2f:29:8d:b9:ae:a0:63:45:9d:05:cd:70:16:c3:3c:
62:f6:84:11:fb:b4:c8:bd:b4:33:0d:c6:19:93:60:01:c8:ad:
43:c7:ae:03:ee:58:bf:73:79:a4:93:bf:35:f2:8e:c7:9c:02:
d3:be:93:e0:f9:de:cd:62:39:19:fb:08:b8:46:ea:ee:3b:4b:
5b:91:8d:15:f1:b3:d6:b4:33:44:48:88:c3:5c:b0:71:17:04:
84:88:63:09:3b:2d:d4:1f:10:50:83:6e:f2:dc:e3:c1:92:3c:
4a:7b:1a:74:13:ff:5a:6b:7c:9b:af:59:55:66:f1:e5:23:30:
31:75:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:46 2024 by rpki-client on console-fra.rpki-client.org